CVE-2005-3902

Cross-site scripting (XSS) vulnerability in gui/errordocs/index.php in Virtual Hosting Control System (VHCS) 2.2.0 through 2.4.6.2 allows remote attackers to inject arbitrary web script or HTML via query strings that are included in an error message, as demonstrated using a parameter containing script.

• http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039000.htmlPatch, Vendor Advisory
• http://marc.info/?l=bugtraq&m=113269811630139&w=2
• http://moritz-naumann.com/adv/0006/vhcsxss/0006.txtPatch, Vendor Advisory
• http://secunia.com/advisories/17704/Patch, Vendor Advisory
• http://securityreason.com/securityalert/202
• http://www.osvdb.org/21060Exploit
• http://www.securityfocus.com/bid/15538Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23209
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039000.htmlPatch, Vendor Advisory
• http://marc.info/?l=bugtraq&m=113269811630139&w=2
• http://moritz-naumann.com/adv/0006/vhcsxss/0006.txtPatch, Vendor Advisory
• http://secunia.com/advisories/17704/Patch, Vendor Advisory
• http://securityreason.com/securityalert/202
• http://www.osvdb.org/21060Exploit
• http://www.securityfocus.com/bid/15538Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23209

Published

Nov 29, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3896Mozilla allows remote attackers to cause a denial of service…
• CVE-2005-3897Apple Safari 2.0.2 allows remote attackers to cause a denial…
• CVE-2005-3898Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-3899The automatic update feature in Google Talk allows remote at…
• CVE-2005-3900Macromedia Breeze Communication Server and Breeze Live Serve…
• CVE-2005-3901Macromedia Flash Communication Server MX 1.0 and 1.5 does no…
• CVE-2005-3903Buffer overflow in uidadmin in SCO Unixware 7.1.3 and 7.1.4 …
• CVE-2005-3904Unspecified vulnerability in Java Management Extensions (JMX…
• CVE-2005-3905Unspecified vulnerability in reflection APIs in Java SDK and…
• CVE-2005-3906Multiple unspecified vulnerabilities in reflection APIs in J…
• CVE-2005-3907Unspecified vulnerability in Java Runtime Environment in Jav…
• CVE-2005-3908Cross-site scripting (XSS) vulnerability in search.php in Gh…